Privilege Reference

• Manage the organization usage analytics data:

  • Add and delete test usage analytics data in the account

  • Edit, get, delete, and disable the organization account

• Define IP addresses whose events are flagged as internal (see Administration API - Version 15 and Internal Events)

• Administrators

• API keys

• View reports (see Managing Usage Analytics Reports)

• View dimensions (see Managing Dimensions on Custom Metadata)

• View named filters (see Managing Named Filters)

• View permission filters (see Managing Permission Filters)

• View usage analytics data exports (see Managing Data Exports)

• (For Coveo Cloud organizations created prior to April 23, 2019 that did not go through the Coveo ML migration process only) View Coveo Machine Learning models (see Adding and Managing Coveo Machine Learning Models)

• Analytics managers

• Analytics viewers

• Relevance managers

• View reports (see Managing Usage Analytics Reports)

• View dimensions (see Managing Dimensions on Custom Metadata)

• View named filters (see Managing Named Filters)

• View permission filters (see Managing Permission Filters)

• View usage analytics data exports (see Managing Data Exports)

• (For Coveo Cloud organizations created prior to April 23, 2019 that did not go through the Coveo ML migration process only) View Coveo Machine Learning models (see Adding and Managing Coveo Machine Learning Models)

• Send analytics events to Coveo UA (see Adding and Managing API Keys)

View and download usage analytics data exports containing clicks, groups, keywords, searches, and custom events meeting the specified criteria for a specific date range (see Managing Data Exports)

• Add, edit, or delete analytics data exports from the specified user visits (see Managing Data Exports)

• Review user visits (see Reviewing User Visits With the Visit Browser)

• Administrators

• Analytics managers

• Analytics viewers

• Relevance managers

• Administrators

• API keys

• View dimensions (see Managing Dimensions on Custom Metadata)

• View reports (see Managing Usage Analytics Reports)

• View named filters (see Managing Named Filters)

• View permission filters (see Managing Permission Filters)

Add, edit, or delete dimensions created by Coveo Cloud organization members (see Managing Dimensions on Custom Metadata)

• Administrators

• Analytics managers

Allow a custom process or bot to push usage analytics events with different identities

• Administrators

• API keys

View incoherent events (see Reviewing Incoherent Usage Analytics Events)

Administrators

View metric alerts (see Reviewing Usage Analytics Metric Alerts)

Dismiss and reactivate metric alerts (see Reviewing Usage Analytics Metric Alerts)

Administrators

Add, edit, or delete named filters (see Managing Named Filters)

• Administrators

• Analytics managers

• Relevance managers

View permission filters restricting the usage analytics data that analysts can review in reports (see Managing Permission Filters)

• Analytics viewers

• Analytics managers

• Relevance managers

• Users

Add, edit, or delete permission filters (see Managing Permission Filters)

Administrators

View usage analytics reports (see Reviewing and Managing Dashboards and Reviewing and Managing Usage Analytics Explorers)

Add, edit, or delete usage analytics reports (see Managing Usage Analytics Reports)

• Administrators

• Analytics managers

• Relevance managers

Allow a process such as a search interface to receive query suggestions from Coveo Usage Analytics (Coveo UA)(see About Usage Analytics Service Query Suggestions)

• Administrators

• API keys

View all reports, regardless of report accesses (see Managing Usage Analytics Report Access in Reports). Members that do not have this access level can only review the reports they are explicitly allowed to access.

• Administrators

• Analytics managers

View catalogs and catalog configuration.

Add, edit, or delete catalogs.

View the code and usage statistics of available extensions assigned to sources. This is especially useful when troubleshooting cases such as item indexing issues (see Adding and Managing Extensions).

Add code snippets to apply transformations to included items such as adding or modifying metadata (see Adding and Managing Extensions). It is recommended to grant this privilege to developers only.

• Administrators

• Content managers

View fields and field configuration (see Adding and Managing Fields)

• Add, edit, or delete fields (see Adding and Managing Fields)

• Add, update, or delete fields in batches (see Creating Fields)

• Administrators

• API keys

• Content managers

• In the Sources pages, see in which index the content of each source is stored (see Managing Your Organization Indexes)
• When adding a source, select the index in which the retrieved content will be stored

Required to use an upcoming feature. Granting this access level to groups of users does not give them any additional capabilities yet.

• Administrators
• Content managers

• View security identity provider update status, statistics, and refresh schedule (see Managing Security Identities)

• View security identity provider references such as provider IDs and the sources that use each provider (see Review Additional Statistics)

• View the permissions and effective permissions on Coveo Cloud organization items (see Review Item Properties)

• View security identities and their status inside each security provider

Only required by certain API calls (e.g., enable all disabled entities in security cache). Granting this access level to groups of users does not give them any additional capabilities.

Administrators

• View security identity provider update status, statistics, and refresh schedule (see Managing Security Identities)

• View security identity provider references such as provider IDs and the sources that use each provider (see Review Additional Statistics)

• View security identities and their status inside each security provider

• Refresh security identity providers (see Refresh a Security Identity Provider and Refresh All Security Identities)

• Edit security identity provider refresh schedules

• Edit provider JSON configuration (see Manage Advanced Security Identity Provider Parameters)

Administrators

• View all sources (see Adding and Managing Sources)

• View configuration of all sources

• View all source logs (see Log Browser)

• Subscribe to source notifications (see User Notifications)

Users

• View source (see Adding and Managing Sources)

• View source configuration

• View source logs (see Log Browser)

• Subscribe to source notifications (see User Notifications)

• Edit or delete specific sources (see Add or Edit a Source)

• Edit specific source refresh schedules (see Edit a Source Schedule)

• Edit specific source mappings (see Adding and Managing Source Mappings)

• Launch, pause, resume, and cancel specific source updates (see Refresh, Rescan, or Rebuild Sources)

• Use the push API to send content to Coveo Cloud (see Push API)

• Subscribe to source notifications (see User Notifications)

• Add all sources (see Add or Edit a Source)

• Edit or delete all sources (see Add or Edit a Source)

• Edit all source refresh schedules (see Edit a Source Schedule)

• Edit all source mappings (see Adding and Managing Source Mappings)

• Launch, pause, resume, and cancel all source updates (see Refresh, Rescan, or Rebuild Sources)

• Use the push API to send content to Coveo Cloud (see Push API)

• Subscribe to source notifications (see User Notifications)

• Administrators

• Content managers

View Coveo Machine Learning models

Add, edit, or delete machine learning models, and thus optimize search results relevance and search experience in general (see Adding and Managing Coveo Machine Learning Models).

• Administrators

• Relevance managers

View in read-only mode the configuration of all API keys (see Adding and Managing API Keys).

• Content managers

• Relevance managers

View in read-only mode the configuration of specific API keys (see Adding and Managing API Keys).

Edit, delete, activate, and disable specific API keys (see Adding and Managing API Keys and Understanding the Custom Access Level)

Add, edit, delete, activate, and disable all API keys (see Adding and Managing API Keys and Understanding the Custom Access Level)

Administrators

View all organization activities (see Review All Events Related to Coveo Cloud Administration Console Resources)

• Content managers

• Relevance managers

Send custom activities to Coveo Cloud (see Add or Edit a Push Source)

• Administrators

• API keys

• View index status (see Index Status)

• View index details (see Review Index Details)

• Add an index (see Add an Index)

• Edit the JSON configuration of an index (see Edit an Index JSON Configuration)

Administrators

• View all groups, including their privileges (see Adding and Managing Groups)

• View organization members (see Adding and Managing Members)

Analytics managers

View groups, including their privileges (see Adding and Managing Groups)

• Content managers

• Relevance managers²

• Users³

• Copy, edit, or delete groups and members (see Duplicate a Group, Edit a Group, and Delete a Group)
• Edit group member privileges (see Privileges Tab)
• Send invitations to users (see Adding and Managing Groups, and Adding and Managing Members)

• Relevance managers²

• Users³

• Copy, edit, or delete all groups and their members (see Duplicate a Group, Edit a Group, and Delete a Group)
• Edit privileges of all groups (see Privileges Tab)
• Send invitations to users (see Adding and Managing Groups and Adding and Managing Members)

Administrators

View organization notifications (see Adding and Managing Notifications)

Edit and delete organization notifications (see Adding and Managing Notifications)

Administrators

• Access the Coveo Cloud administration console¹ (see Minimum Privilege and Coveo Cloud V2 Administration Console)

  Without the View access level, an organization member gets the following message when trying to log in to the administration console (see Logging in to Coveo Cloud V2):

  Insufficient Privileges - You currently have insufficient privileges to access the Coveo Cloud administration console of the [OrganizationName] organization. Contact an administrator of the [OrganizationName] organization to change your privileges, or select an organization to which you have access through the Coveo Cloud administration console.

• View the organization status and license type (see License)

• Analytics managers

• Analytics viewers

• Content managers

• Relevance managers

• Users

• Edit the organization display name and contact (see Organization Information)

• Delete the organization (see Organization Information)

• Allow Coveo Professional Services access to the organization (see Organization Information)

Administrators

For organization members and API keys to send queries and get search results in search pages connected to their Coveo Cloud organization (see Searching With Coveo Cloud)

• Administrators

• API keys

• Content managers

• Relevance managers

• Users

Obtain a search token for a search interface with secured content to perform queries with the end-user identity and return only results the user is authorized to see.

• Administrators

• API keys

Manage authentication for secured sources such as when they are protected with SharePoint claims-based identities

• Administrators

• API keys

• View query pipelines (see What Is a Query Pipeline? and Managing Query Pipelines)

• View query pipeline rules

• View query pipeline rule conditions (see Managing Query Pipeline Rules and Rule Conditions From Tabs)

• View A/B tests (see Managing A/B Tests)

• View query pipeline (see What Is a Query Pipeline? and Managing Query Pipelines)

• View query pipeline rules

• View query pipeline rule condition (see Managing Query Pipeline Rules and Rule Conditions From Tabs)

• View A/B test (see Managing A/B Tests)

• Edit or delete specific query pipelines (see What Is a Query Pipeline? and Managing Query Pipelines)

• Edit or delete specific query pipeline rules (see Managing Query Pipeline Rules and Rule Conditions From Tabs)

• Edit or delete specific query pipeline rule conditions (see Managing Query Pipeline Rules and Rule Conditions From Tabs)

• Edit or delete specific A/B tests (see Managing A/B Tests)

Optimize results relevance and search experience in general:

• Add, edit, or delete all query pipelines (see What Is a Query Pipeline? and Managing Query Pipelines)

• Add, edit, or delete all query pipeline rules (see Managing Query Pipeline Rules and Rule Conditions From Tabs)

• Add, edit, or delete all query pipeline rule conditions (see Managing Query Pipeline Rules and Rule Conditions From Tabs)

• Add, edit, or delete all A/B tests (see Managing A/B Tests)

• Administrators

• Relevance managers

Link a Coveo Cloud organization to a Salesforce organization that uses a Salesforce index

Access the search pages hosted by the Coveo Cloud organizations of which a user is a member

Users

• Add or delete hosted search pages (see Adding and Managing Search Pages)

• Edit hosted search pages, i.e.,

  • Customize search page interfaces (see Customize the Interface of a Search Page)

  • Edit search page configurations (see Adding and Managing Search Pages)

Browse all the content of a Coveo Cloud organization index, and thus be able to troubleshoot search issues (see Inspect Items With the Content Browser)